A person who is, or has been, a member must not, directly or indirectly, record, disclose or make use of any information obtained in the course of his or her membership except ¾

(a) for the purpose of performing his or her functions under the Act or these regulations;

(b) as otherwise required or allowed by law; or

(c) with the written consent of the person to whom the information relates.

Penalty: $1 000.